What’s Vulnerable › Vulnerabilities

CVE-2023-5948: Improper Authorization in teamamaze/amazefileutilities

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-11-03 · updated 2026-06-17
• Weakness: CWE-285

Description

Improper Authorization in GitHub repository teamamaze/amazefileutilities prior to 1.91.

Affected products

• teamamaze/amazefileutilities: before 1.90 — fixed in 1.90

How to fix

Upgrade to a fixed version: teamamaze/amazefileutilities 1.90. Check the vendor advisory for mitigations.

References

• https://github.com/teamamaze/amazefileutilities/commit/62d02204d452603ab85c50d43c7c680e4256c7d7
• https://huntr.com/bounties/ac1363b5-207b-40d9-aac5-e66d6213f692
• https://github.com/teamamaze/amazefileutilities/commit/62d02204d452603ab85c50d43c7c680e4256c7d7
• https://huntr.com/bounties/ac1363b5-207b-40d9-aac5-e66d6213f692

Get alerted when CVE-2023-5948 or the next vulnerability affects your stack